Vista - UAC for a specific Program, how to turn off?

I don't mind the click throughs of UAC (or not at this early stage in my
Vista land experience) but when you know a specific program is OK (in this
case M$ Money 2005) that is set up to run as an Administrator, why on earth
do I have to always click "Allow I trust this program"

I can see where I can turn this off for everything, but is there no-way I
can do this for individual programs that UAC is flagging??

Frenchy

Frenchy wrote:
> I don't mind the click throughs of UAC (or not at this early stage in my
> Vista land experience) but when you know a specific program is OK (in
> this case M$ Money 2005) that is set up to run as an Administrator, why
> on earth do I have to always click "Allow I trust this program"
>
> I can see where I can turn this off for everything, but is there no-way
> I can do this for individual programs that UAC is flagging??
>
> Frenchy

If it was set to automatically allow, then any exploit of that program
would automatically run with admin privileges.

Just my take on it.

gls858

Hi,

That's not UAC, that occurs because the program is trying to write to system
files. Under Vista, program's shouldn't be doing that. As that older piece
of software is not Vista compliant, it will always require elevated
privileges to run.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org

"Frenchy" <Invalid@invalid.com> wrote in message
news:%23D89atzaHHA.4940@TK2MSFTNGP05.phx.gbl...
>I don't mind the click throughs of UAC (or not at this early stage in my
>Vista land experience) but when you know a specific program is OK (in this
>case M$ Money 2005) that is set up to run as an Administrator, why on earth
>do I have to always click "Allow I trust this program"
>
> I can see where I can turn this off for everything, but is there no-way I
> can do this for individual programs that UAC is flagging??
>
> Frenchy

"gls858" <gls858@yahoo.com> wrote in message
news:eGNjMyzaHHA.4520@TK2MSFTNGP06.phx.gbl...
> Frenchy wrote:
>> I don't mind the click throughs of UAC (or not at this early stage in my
>> Vista land experience) but when you know a specific program is OK (in
>> this case M$ Money 2005) that is set up to run as an Administrator, why
>> on earth do I have to always click "Allow I trust this program"
>>
>> I can see where I can turn this off for everything, but is there no-way I
>> can do this for individual programs that UAC is flagging??
>>
>> Frenchy
>
> If it was set to automatically allow, then any exploit of that program
> would automatically run with admin privileges.
>
> Just my take on it.
>
> gls858

Nope. This freaking Microsoft Money 2005 (the latest version that is
available here in New Zealand) will not run at all, unless I give it Admin
privileges and once that is done, it asks each time to allow it to open.
You would have thought M$ would have got their own programs up to Vista
speed??

Frenchy

Meant to start that with "That's not UAC's fault,...."

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org

"Rick Rogers" <rick@mvps.org> wrote in message
news:%23PhoW6zaHHA.4552@TK2MSFTNGP05.phx.gbl...
> Hi,
>
> That's not UAC, that occurs because the program is trying to write to
> system files. Under Vista, program's shouldn't be doing that. As that
> older piece of software is not Vista compliant, it will always require
> elevated privileges to run.
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Windows help - www.rickrogers.org
>
> "Frenchy" <Invalid@invalid.com> wrote in message
> news:%23D89atzaHHA.4940@TK2MSFTNGP05.phx.gbl...
>>I don't mind the click throughs of UAC (or not at this early stage in my
>>Vista land experience) but when you know a specific program is OK (in this
>>case M$ Money 2005) that is set up to run as an Administrator, why on
>>earth do I have to always click "Allow I trust this program"
>>
>> I can see where I can turn this off for everything, but is there no-way I
>> can do this for individual programs that UAC is flagging??
>>
>> Frenchy
>

Frenchy wrote:

> I don't mind the click throughs of UAC (or not at this early stage in my
> Vista land experience) but when you know a specific program is OK (in this
> case M$ Money 2005) that is set up to run as an Administrator, why on
> earth do I have to always click "Allow I trust this program"
>
> I can see where I can turn this off for everything, but is there no-way I
> can do this for individual programs that UAC is flagging??
>
> Frenchy

Instructions here might help you ...

http://youtube.com/watch?v=VuqZ8AqmLPY

Cheers.

--
The "Wow" starts now.
http://www.youtube.com/watch?v=KyLqUf4cdwc&eurl=

Windows is not a virus! Viruses are small, efficient and built to get a job
done. Windows on the other hand ...

On Wed, 21 Mar 2007 10:01:44 +1200, "Frenchy" <Invalid@invalid.com>
wrote:

>I don't mind the click throughs of UAC (or not at this early stage in my
>Vista land experience) but when you know a specific program is OK (in this
>case M$ Money 2005) that is set up to run as an Administrator, why on earth
>do I have to always click "Allow I trust this program"

Because Vista hasn't been taught how to make and follow a
decision/rules list based on specific rules and past events. A
shocking omission, I can't believe Microsoft just forgot by accident.
One reason I feel Vista was rushed out the door, unfinished.

A decision list is a common programming routine often used in
Firewalls where some screen will pop up THE FIRST TIME some
application wants to do something, like your browser or FTP client
wanting to gain access to the Internet. The Firewall asks YOU, NEVER
deciding by itself, if YOU want to allow this action or not. The next
time, the Firewall then looks of this Rules or decision list instead
of nagging you and takes the appropriate action by itself. So it only
nags once, then sets up some "rule" for the next time. Of course you
can also modify or changes the "rules" for specifc applications as
often as you want. That's why UAC while a good idea, is POORLY
implemented. Shame on Microsoft! They know better.

"Adam Albright" <AA@ABC.net> wrote in message
news:nhs003teg7clkp6csbe17rs2rqhokl6lgb@4ax.com...

> Because Vista hasn't been taught how to make and follow a
> decision/rules list based on specific rules and past events. A
> shocking omission, I can't believe Microsoft just forgot by accident.
> One reason I feel Vista was rushed out the door, unfinished.

Sorry Adam. Go listen to what the actual developers working on UAC said.
http://channel9.msdn.com/Showpost.aspx?postid=288259

--
Paul Smith,
Yeovil, UK.
Microsoft MVP Windows Shell/User.
http://www.windowsresource.net/

*Remove nospam. to reply by e-mail*

Hello,

UAC ensures that *you* are the one starting an administrative program.

If there was an option to "always allow" a certain program to run with admin
power, this could not be guaranteed. Because then, a devious program could
run that "always allow" application and perform the administrative tasks
that it does, without your knowledge/consent.

Now, in the case of MS MONEY, you're right; it should not need admin access
at all, and hopefully MS will release a patch that allows it to run without
admin power.

But, to use a more common example, where you would "always allow" an
administrative tool, such as format.exe, to always run elevated: this would
allow malware to run format.exe without your knowledge, giving them the
power to erase your data, and you would not be able to stop it.

UAC does two things:

1- Makes sure programs that do NOT need admin power, do not receive it

2- Makes sure that *YOU* are the one that is performing an administrative
program

This #2 is the reason you can't always allow programs - because without the
prompt, the system can't be sure that you are starting a program as opposed
to some other program starting a program. ("Hey why is format.exe running; I
didn't start it!")


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

Heard it, been there. The problem with UAC is that while it is necessary,
virtually no applications from the past work correctly. They want to write
data to the Program Files directory, or even the Windows Directory. They
write to administrator registery areas.

The issue is that Microsoft either gave no thought to valid applications
that behave this way, or didn't give a flying flick. So without
consideration to how things are 'in the real world.' Microsoft made the
unilateral decision to make these applications fail or be so difficult to
install and use as to be impossible.

Now, we come to the issue of the specific old applications and Microsoft's
claims that "you just need to get your application manufacturer to fix their
code." This falls directly in the face of the fact that Microsoft hasn't
even (as of the time Vista Launched) taken the time to fix their OWN
applications. So how do we convince ISV's to fix their apps, when Microsoft
won't do the same?

So, does this mean that Microsoft's engineers are incompetent or that
Microsoft as a company is acting in a malevolent fashion? Not very good
choices, but from out here 'in the real world' those are the only apparent
choices we have when considering Microsoft's design of the UAC.

Is there a better way to do this without 'inflicting pain?' Absolutely, as
has been proven by much more robust and secure operating systems the world
over. However, we are left to believe that Microsoft didn't care to do it
right.

"Paul Smith" <Paul@nospam.windowsresource.net> wrote in message
news:%233mGuv0aHHA.1300@TK2MSFTNGP02.phx.gbl...
> "Adam Albright" <AA@ABC.net> wrote in message
> news:nhs003teg7clkp6csbe17rs2rqhokl6lgb@4ax.com...
>
>> Because Vista hasn't been taught how to make and follow a
>> decision/rules list based on specific rules and past events. A
>> shocking omission, I can't believe Microsoft just forgot by accident.
>> One reason I feel Vista was rushed out the door, unfinished.
>
> Sorry Adam. Go listen to what the actual developers working on UAC said.
> http://channel9.msdn.com/Showpost.aspx?postid=288259
>
> --
> Paul Smith,
> Yeovil, UK.
> Microsoft MVP Windows Shell/User.
> http://www.windowsresource.net/
>
> *Remove nospam. to reply by e-mail*
>
>